view manifests/nodes.pp @ 331:f69e2d197302

Separate some certs to make migration easier LetsEncrypt requires all domains on the cert to be accessible when renewing. If some migrated and some didn't then it won't work. Separating sites gives us more options for moving sites
author IBBoard <dev@ibboard.co.uk>
date Sun, 08 Mar 2020 19:56:26 +0000
parents 63e0b5149cfb
children 60b13e6d83c5
line wrap: on
line source

node 'clouduk.ibboard.co.uk' {
	class { 'ibboardvpsnode':
		primary_ip => '213.229.111.243',
		mailserver => 'mail.ibboard.co.uk',
		imapserver => 'imap.ibboard.co.uk',
		firewall_cmd => 'iptables',
	}
}

node 'cloudtest.ibboard.co.uk' {
	class { 'ibboardvpsnode':
		primary_ip => '192.168.1.78',
		mailserver => 'mail.ibboard.co.uk',
		imapserver => 'imap.ibboard.co.uk',
		firewall_cmd => 'iptables',
	}
}
node 'ibbvps.vs.mythic-beasts.com' {
	class { 'ibboardvpsnode':
		primary_ip => '2a00:1098:82:52::1',
		proxy_4to6_ip_prefix => '2a00:1098:82:52::01d4', # ::old4 for IPv4!
		proxy_upstream => ['2a00:1098::82:1000:3b:1:1', '2a00:1098::80:1000:3b:1:1'],
		nat64_ranges => ['2a00:1098:0:80:1000:3a::/96', '2a00:1098:0:82:1000:3a::/96'],
		mailserver => 'mail.ibboard.co.uk',
		imapserver => 'imap.ibboard.co.uk',
		mailrelays => ['mx.mythic-beasts.com'],
		firewall_cmd => 'iptables',
	}
	# If the console fails to start, you may need to run "restorecon /etc/systemd/system/getty.target.wants/*"
	# to reset the SELinux context of the file
	service { 'serial-getty@ttyS0':
		ensure => 'running',
		enable => 'true',
	}
	firewall { '090 Allow SSH (IPv4-to-IPv6)':
		dport => 22,
		source => '2a00:1098:0:82:1000:0:5d5d:826a',
		proto => 'tcp',
		action => 'accept',
	}
}